Legal claims defining the scope of protection. Each claim is shown in both the original legal language and a plain English translation.
1. A method of establishing a user centric virtual network, the method comprising: performing a first tunneling operation between a first tunnel end and an address translation device, which are connected to a first private network, and a tunnel relay device; performing a second tunneling operation between a second tunnel end and an address translation device, which are connected to a second private network, and the tunnel relay device; and performing a third tunneling operation between the tunnel relay device and an end client, wherein a virtual IP is allocated differently for each user, to each of the first and second tunnel ends, the address translation devices, the end client, and the tunnel relay device; and each of the first to third tunneling operations connects routing information on the virtual IP to a corresponding tunnel; wherein each network address translator between the first tunnel end and address translation device and the tunnel relay device, between the second tunnel end and address translation and the tunnel relay device, and between the tunnel relay device and the end client.
A method for creating a user-specific virtual network involves establishing three tunnels. The first tunnel connects a first private network (via a tunnel endpoint and an address translation device) to a tunnel relay device. The second tunnel connects a second private network (via a second tunnel endpoint and address translation device) to the tunnel relay device. The third tunnel connects the tunnel relay device to an end client. Each user gets a unique virtual IP address assigned to each device involved in the tunnels: the tunnel endpoints, address translation devices, the end client, and the tunnel relay device. Each tunneling operation associates the virtual IP routing information with its corresponding tunnel. Network Address Translators exist between the tunnel ends and address translation devices, and between the tunnel relay device and the end client.
2. The method of claim 1 , wherein each of the performing of the first to third tunneling operations comprises: transmitting/receiving a message for tunnel setting; and setting tunnel information and routing information by using the transmitted/received message.
The method of establishing a user-specific virtual network, which involves first connecting a first private network to a tunnel relay, second connecting a second private network to a tunnel relay, and third connecting the tunnel relay to an end client using tunnels and unique virtual IP addresses for each user, includes the following steps for each tunnel: transmitting and receiving a message to set up the tunnel and configuring tunnel information and routing information based on the transmitted or received message. So, for each of the three tunnels, a message exchange occurs to establish the tunnel and configure its parameters.
3. The method of claim 2 , wherein the tunnel information comprises an external IP and an external port, wherein the external IP is an address translated by the network address translator; and the external port is a port translated by the network address translator.
The method of establishing a user-specific virtual network, which involves transmitting/receiving tunnel setup messages and configuring tunnel and routing information, specifies that the tunnel information includes an external IP address and an external port. The external IP address is the address translated by a Network Address Translator (NAT). The external port is also a port translated by the NAT. Thus, the tunnel information utilizes NAT-translated IP addresses and ports.
4. The method of claim 2 , wherein the tunnel relay device: deletes an outer header and a user datagram protocol header of the tunnel when a packet corresponding to a set tunnel arrives; and if there is a corresponding tunnel after referring to a virtual IP and routing information in an inner header, adds the user datagram protocol header and the outer header to the packet and forwards the packet to the tunnel.
The method of establishing a user-specific virtual network, which involves transmitting/receiving tunnel setup messages and configuring tunnel and routing information, describes how the tunnel relay device handles incoming packets. When a packet arrives on a set tunnel, the relay device removes the outer header and UDP header. It then checks the inner header for a virtual IP address and routing information. If a corresponding tunnel is found, the relay device adds a UDP header and outer header back to the packet and forwards it to that tunnel.
5. The method of claim 1 , wherein if a destination IP in the inner header is not an IP on a virtual network, the tunnel relay device performs a network address translation function on an internet packet.
In the method of establishing a user-specific virtual network via tunneling and unique virtual IP addresses, if the destination IP address in the inner header of a packet is not an IP address within the virtual network, the tunnel relay device performs Network Address Translation (NAT) on the internet packet. This allows packets destined for the public internet to be properly routed.
6. The method of claim 2 , wherein each of the first and second tunnel ends and the address translation devices sets a virtual IP allocated from the tunnel relay device in a corresponding tunnel.
The method of establishing a user-specific virtual network, which involves transmitting/receiving tunnel setup messages and configuring tunnel and routing information, specifies that the first and second tunnel endpoints and the address translation devices each configure a virtual IP address (allocated by the tunnel relay device) within their corresponding tunnel. This ensures that each device uses the assigned virtual IP address for communication within the virtual network.
7. The method of claim 2 , wherein if the destination of a packet is in a virtual network area, the end client transmits/receives a packet through tunneling, and if not, the end client transmits/receives a packet through an available interface.
The method of establishing a user-specific virtual network, which involves transmitting/receiving tunnel setup messages and configuring tunnel and routing information, defines how the end client sends packets. If the destination of a packet is within the virtual network, the end client transmits and receives the packet through tunneling. If the destination is not within the virtual network, the end client transmits and receives the packet through a standard, available network interface.
8. A user centric virtual network comprising: a tunnel end and an address translation device connected to a private network; a tunnel relay device transmitting data through the tunnel end and address translation device and first tunneling; and an end client transmitting data through the tunnel relay device and second tunneling, wherein each virtual IP is allocated differently for each user, to the tunnel end, the address translation device, the end client, and the tunnel relay device; and each of the first and second tunneling connects routing information on the virtual IP to a corresponding tunnel; wherein each network address translator between the first tunnel end and address translation device and the tunnel relay device, between the second tunnel end and address translation and the tunnel relay device, and between the tunnel relay device and the end client.
A user-specific virtual network is built using a tunnel endpoint and address translation device connected to a private network, a tunnel relay device transmitting data via a first tunnel formed with the tunnel endpoint and address translation device, and an end client transmitting data via a second tunnel with the tunnel relay device. Each user receives a unique virtual IP address allocated to the tunnel endpoint, address translation device, end client, and tunnel relay device. Each tunnel connects the routing information for the virtual IP addresses to the corresponding tunnel. There is a Network Address Translator between the first tunnel end and address translation device and the tunnel relay device, between the second tunnel end and address translation device and the tunnel relay device, and between the tunnel relay device and the end client.
Unknown
October 28, 2014
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.